Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: 90DJ2W6Z3Ea/6/KP4iW9iAziI3H1CaSMBYLDRKRKcIs=
Subject key identifier: 0B:72:8B:E8:66:01:F5:74:29:EF:F2:5B:DB:F3:92:DA:7B:7F:87:32
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 019FA14D52DB64ACD452FE92A6B62BA10CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 02:00:26 +0000
Manifest this update: Mon 27 Jul 2026 02:00:26 +0000
Manifest next update: Tue 28 Jul 2026 02:00:26 +0000
Files and hashes: 1: 1CWLAk4NIMUnFYJki_bxyTx1nws.roa (hash: j9+hDv6Zflhv8guE2phuedVAKjBmaEfxQKBlQz2Y+10=)
2: K-3AW1zodZQo96foEv6vSPWnznA.roa (hash: 3dK44a2XFe/Ax80oJyqlgMjQENi9InYwps3O9K6x3VI=)
3: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: lwHTaOzq0u1fUs5xpvL2BPOVL4h9lrUrjC90jjsNf7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:52:db:64:ac:d4:52:fe:92:a6:b6:2b:a1:0c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Jul 27 02:00:26 2026 GMT
Not After : Jul 28 02:00:26 2026 GMT
Subject: CN=0b728be86601f57429eff25bdbf392da7b7f8732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:3a:de:5c:f1:23:d7:00:1d:30:5a:8d:a5:
b2:48:6b:06:f9:0c:aa:8c:13:78:5b:a2:9b:4d:3f:
81:0a:07:ea:f8:c8:c8:50:07:47:6a:2e:81:9c:40:
ba:1e:25:e2:4e:5b:6f:74:1e:73:d7:77:37:76:5c:
95:ad:1b:9e:56:28:9b:57:0f:54:ec:7a:4e:e5:ae:
8b:24:3b:93:cf:32:88:01:8d:09:44:9a:66:eb:24:
23:f0:ea:5a:44:80:29:a7:ed:96:f5:c4:e0:7a:ba:
27:68:24:d7:dd:32:65:1e:40:a8:cd:28:16:39:94:
ed:5d:02:7d:91:47:6c:7c:87:1f:89:51:5b:54:73:
a8:ba:5c:1c:50:08:4d:ea:70:d2:6c:8e:1b:74:ce:
a0:8e:a1:da:a8:b4:af:23:71:fb:87:e7:67:91:c0:
15:a6:ed:67:7e:13:c8:a0:57:da:9f:71:37:8e:d6:
ce:5b:b7:06:80:76:98:21:c6:02:f0:d7:d7:d2:b4:
bf:06:d7:91:b9:f4:e1:00:0f:57:14:87:16:02:41:
f7:e8:42:91:24:92:d3:76:d5:73:b5:26:f9:88:3c:
79:1e:ac:77:c3:9d:68:1a:66:4a:3b:ad:e0:96:20:
22:a4:bc:55:05:89:03:cd:4e:c4:30:30:62:b4:46:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:72:8B:E8:66:01:F5:74:29:EF:F2:5B:DB:F3:92:DA:7B:7F:87:32
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:60:1d:15:d6:ba:8c:09:7e:f8:5c:04:84:f1:b2:ae:8d:d8:
79:d1:96:69:d1:6f:a1:cf:3e:3d:2c:70:a9:67:35:63:d0:48:
0f:0b:56:fa:1c:a6:d6:8b:dd:28:1d:ff:ec:52:b8:70:d7:c2:
b0:16:3b:84:1e:89:24:1b:fc:e6:cb:08:ee:36:0c:25:e2:0c:
88:4b:94:7c:34:ee:fd:c1:43:c3:61:b1:d8:b0:54:90:ab:11:
2a:06:0f:73:f6:93:79:4a:13:32:96:c2:b2:e9:41:25:2c:52:
d5:79:08:dd:fc:5a:71:88:8c:50:ce:cf:ee:f0:3c:05:29:67:
fa:23:26:d1:3e:68:9f:0f:25:07:ef:91:62:d1:50:ae:05:82:
89:60:14:b3:86:2a:6f:f9:4c:a8:4c:4c:29:6c:bc:51:14:d9:
d8:ee:8b:8d:35:5c:39:fd:1d:7c:2a:5b:c4:a4:8a:ca:94:fe:
f3:3e:5b:6a:73:ac:91:02:62:49:72:a4:fb:02:71:08:10:b3:
d4:21:12:0c:b7:35:19:29:1b:90:ba:a8:99:a9:fe:cf:9f:19:
8b:60:93:01:4d:8b:01:b2:17:d5:3d:68:7c:c8:dc:80:fa:d7:
76:41:92:0c:01:c2:52:4b:33:81:28:f7:43:93:60:6c:0d:92:
e0:73:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:47 2026 by rpki-client